mirror of
https://github.com/micropython/micropython.git
synced 2026-03-07 01:10:27 +01:00
e40d609a0e
The axTLS implementation of the tls module only has a basic set of features. In particular it doesn't support the CERT_REQUIRED constant nor DTLS, nor can it load the `ec_key.der` key when acting as a server. So skip tests that require these features, which ends up being all the ssl/tls tests. Signed-off-by: Damien George <damien@micropython.org>
57 lines
1.5 KiB
Python
57 lines
1.5 KiB
Python
# Test creating an SSL connection when server_hostname is required but not specified.
|
|
|
|
try:
|
|
import os
|
|
import socket
|
|
import ssl
|
|
except ImportError:
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
if not hasattr(ssl, "CERT_REQUIRED"):
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
PORT = 8000
|
|
|
|
# These are test certificates. See tests/README.md for details.
|
|
cert = cafile = "ec_cert.der"
|
|
key = "ec_key.der"
|
|
|
|
|
|
# Server
|
|
def instance0():
|
|
multitest.globals(IP=multitest.get_network_ip())
|
|
s = socket.socket()
|
|
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
|
s.bind(socket.getaddrinfo("0.0.0.0", PORT)[0][-1])
|
|
s.listen(1)
|
|
multitest.next()
|
|
s2, _ = s.accept()
|
|
server_ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
|
|
server_ctx.load_cert_chain(cert, key)
|
|
multitest.broadcast("ready")
|
|
try:
|
|
s2 = server_ctx.wrap_socket(s2, server_side=True)
|
|
except Exception as e:
|
|
print(e)
|
|
s.close()
|
|
|
|
|
|
# Client
|
|
def instance1():
|
|
multitest.next()
|
|
s = socket.socket()
|
|
s.connect(socket.getaddrinfo(IP, PORT)[0][-1])
|
|
client_ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
|
|
client_ctx.verify_mode = ssl.CERT_REQUIRED
|
|
client_ctx.load_verify_locations(cafile=cafile)
|
|
# The client will reject the SSL connection so wait until the server is ready
|
|
# so that it can see the rejection (otherwise it sees a closed socket).
|
|
multitest.wait("ready")
|
|
try:
|
|
s = client_ctx.wrap_socket(s)
|
|
except Exception as e:
|
|
print(e)
|
|
s.close()
|